061b58c054877ec0eb1f27ca4be5157d | Triage

Sharing

General

Target

061b58c054877ec0eb1f27ca4be5157d
Size

403KB
MD5

061b58c054877ec0eb1f27ca4be5157d
SHA1

50819a3bacbd235a34393ec19f6f0ccb9bb7343a
SHA256

8d373e4d44abacc5c1a9a96523fd023cdce9b53cc45b5254dae6741146800dea
SHA512

948a1ae65feb9438abd8a347acc6885804a0c64a99e154b43844cb6aefe4febf061b01d71e65c353e7975d695dccf047f3b150c425536c2b69d7d87763688197
SSDEEP

6144:smaKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgd:FSmLAuEY71fviagATFmebVQDcYc5

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
061b58c054877ec0eb1f27ca4be5157d

Files

061b58c054877ec0eb1f27ca4be5157d
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 620KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 370KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fozlr
Size: 512B - Virtual size: 4KB